PureBasic Forums - English

Code: Select all

;Code by thefool


#IMAGE_SIZEOF_SHORT_NAME = 8
Structure IMAGE_SECTION_HEADER
  Name.b[#IMAGE_SIZEOF_SHORT_NAME]
  StructureUnion
    PhysicalAddress.l
    VirtualSize.l
  EndStructureUnion
  VirtualAddress.l
  SizeOfRawData.l
  PointerToRawData.l
  PointerToRelocations.l
  PointerToLinenumbers.l
  NumberOfRelocations.w
  NumberOfLinenumbers.w
  Characteristics.l
EndStructure

OpenFile(1,"prot.exe") ;here you open the file you want to read!
flen=Lof(1)
*mybuf=AllocateMemory(flen) 
ReadData(1,*mybuf,flen)        ;Smack it to the memory.
CloseFile(1)

;**HERE WE DECLARE SOME STUFF**
*dosheader.IMAGE_DOS_HEADER
*dosheader=*mybuf

*ntheader.IMAGE_NT_HEADERS
*ntheader=*dosheader\e_lfanew

*fileheader.IMAGE_FILE_HEADER
*fileheader=*mybuf+*ntheader\FileHeader

*optheader.IMAGE_OPTIONAL_HEADER
*optheader=*mybuf+*ntheader\OptionalHeader

Debug *optheader\BaseOfCode
Debug *optheader\SizeOfCode

;This is basically how you read from the pe header! Look in the iczelions
;pe tutorial and see what sections there are. Here you can get the vals ;)

;YOU CAN CHANGE THEM! and then just save it; go look on the further part..



;**Here i smack in the image sectionheader part.
*PESections.IMAGE_SECTION_HEADER
*pesections=*mybuf+(*dosheader\e_lfanew + SizeOf(image_nt_headers))




;**********CLEAR PE SECTION NAMES**********

For i=1 To *fileheader\NumberOfSections ;<-- here i read the number of sections.

For a=0 To 8
PokeB(*pesections+a,00) ;write 00 to the section names.
Next a

*PEsections = *PEsections + SizeOf(IMAGE_SECTION_HEADER)

Next i

;**********DONE CLEARING**********


CreateFile(2,"out.exe")
WriteData(2,*mybuf,flen) ;here we save the changed pe file!
CloseFile(2)